Montgomery Curves

Montgomery Curves

Allow for x-only arithmetic.

Different equation for adding and doubling means increased risk of side-channel attacks.